وظائف مفتش أمن في مصر

- Security personnel in Noor City (staying in the housing of the Talaat Mustafa Group). <br>- 12-hour daily shifts.<br>- Daily meals provided.<br>- Social and health insurance provided.<br>- Seasonal allowances during holidays and occasions.

- Perform the tasks assigned to maintain the club's security.<br>- Record the necessary visitor data in the designated logs, such as the reason for the visit and entry/exit times to and from the club.<br>- Verify the member's identity before entry by requesting the membership card, especially if there is no photo of them in the system.<br>- Verify member information by referring to the membership department in case of any malfunctions in the member access reader.<br>- Ensure that children do not leave alone.<br>- Perform any other duties that may be required within the scope of the core responsibilities of the job.

<h2><span lang="en" dir="ltr">Ministry of Supply and Internal Trade of Tanta announces a Comptroller Inspector position</span></h2><h2><span lang="en" dir="ltr">Job requirements:</span></h2><ul><li><span>Holder of a higher commercial qualification with a specialization in accounting.</span></li><li><span>Or a higher legal qualification in all sectors.</span></li><li><span>Or a higher agricultural qualification in the Crop Production department.</span></li><li><span>Or a higher agricultural qualification in the Dairy department.</span></li><li><span>Or a higher agricultural qualification in the Food Industries department.</span></li><li><span>General grade of Very Good or higher.</span></li><li><span>Age must not exceed 35 years at the time of application.</span></li><li><span>Familiarity with laws, regulations and decisions governing the work.</span></li><li><span>Proficiency in using computers.</span></li></ul><h2><span lang="en" dir="ltr">Key tasks and responsibilities:</span></h2><ul><li><span>Inspect shops, markets, factories, wholesale traders centers, mills, bakeries, pasta factories, and wholesale/retail flour depots, and other outlets to verify enforcement of ministerial decisions.</span></li><li><span>Take samples of flour and bread, test them, and prepare reports for violators.</span></li><li><span>Maintain records of work organized by the directorate or the Internal Trade Administration.</span></li><li><span>Receive analysis results and prepare reports for violators.</span></li><li><span>Collect previously prepared reports upon request from judicial authorities.</span></li><li><span>Under direct supervision of the designated supervisor.</span></li><li><span>Carry out any other similar tasks as assigned.</span></li></ul><p><span>Work is performed under exceptional conditions due to the difficulty of working in official and unofficial hours, with potential exposure to assaults and risks from violators.</span></p><h2><span lang="en" dir="ltr">Required documents:</span></h2><ol><li><span>Original and a copy of a valid national ID card front and back.</span></li><li><span>Original and a copy of the academic qualification showing the applicant's overall grade, or a statement indicating the overall grade if GPA is used.</span></li><li><span>Original and a copy of military service status for males.</span></li><li><span>Original and a copy of the disability certificate and services for persons with disabilities.</span></li></ol><p><span>If the application is accepted, the applicant will take the exam on the same day.</span></p><h2><span lang="en" dir="ltr">Application details:</span></h2><ul><li><span><strong>Work location:</strong> West</span></li><li><span><strong>Start date of application:</strong> 27/08/2026</span></li><li><span><strong>End date of application:</strong> 10/09/2026</span></li><li><span>The application is submitted electronically within the specified period.</span></li></ul>

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p>Amentum is actively seeking a Senior Diesel Engine Inspector (DEI) to support a large scale maintenance and logistics efforts under the Foreign Military Sales (FMS) program. Come join our growing Iraq team! You will work a 90/30 rotation (90 days on-site and 30 days off) in Alexandria, Egypt. This position includes a competitive benefits package. Essential responsibilities and daily duties include: Assist maintenance and support personnel supporting the Follow On Technical Support (FOTS) contract under NAVSEA PMS 326. Support craft and ships sold to foreign Navies with fleet support of ships undergoing diesel engine repairs, overhauls, and modernization conversions. Perform ready-to-start and post-repair inspections and review of operational testing procedures. Conduct assessments such as ship visits to assess the material condition of shipboard systems. Access, analyze, and provide recommended resolutions on diesel engines based on US Navy diesel inspector program. Perform diesel engine inspections and Formal Periodic Assessments (FPAs) in accordance with the JFMM Revision B (volume four (4), chapter four (4)), OPNAV Instruction 9220.3, and the U.S. Navy Diesel Engine Inspector Handbook S9233- CJ-HBK-010. Blue print an engine, test engines and components, and take critical measurements to assess and eventually plan an overhaul or replacement. Supervise complex repairs to different diesel engines such as MTU, Caterpillar, Fairbanks Morse, Isotta Fraschini, Paxman, etc. Train crew and maintenance personnel in diesel maintenance and operations (focusing on foreign crews).</p></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"></p><ul><li>6 years of technical experience with maintenance of Navy shipboard diesel engines, propulsion, and auxiliary systems.</li><li>Knowledge of computer systems and integrated software application programs.</li><li>Ability to work independently and in a team environment.</li><li>Ability to communicate verbally and in writing.</li><li>Must be proficient in English.</li><li>Ability to travel CONUS and OCONUS.</li><li>Must be willing to travel to the Middle East (Iraq, Egypt, Saudi Arabia, Turkey, Bahrain), and also to Indo/Pacific Countries (Philippines, Taiwan, etc.).</li><li>Ability to obtain a country clearance and base pass authorization.</li><li>Note: US Citizenship is required.</li><li>Ability to possess an active passport at least two years after arrival in Egypt.</li><li>13 or more years of technical experience with maintenance of shipboard diesels.</li><li>Prior US Navy or USCG service as a qualified USN Diesel Engine Inspector (DEI) who held the NEC on active duty OR DEI course certified or civilian equivalent.</li><li>Fincantieri Motori Deisel Engine experience.</li></ul><p></p></section>

We are looking for a Dev Sec Ops Security Engineer to integrate security practices throughout the software development lifecycle and ensure secure delivery of digital banking services. Key Responsibilities Implement security controls within CI/CD pipelines. Manage SAST, DAST, and security scanning solutions. Conduct vulnerability assessments. Support cloud and container security. Collaborate with engineering teams on secure coding practices. Required Qualifications4+ years cybersecurity experience. Dev Sec Ops implementation experience. Cloud security expertise. OWASP and application security knowledge.

<p><h4>Job description</h4> <p>Directs Secure by Design (SbD) assessments across multiple projects simultaneously to ensure process abidance and thorough security integration.<br> Leads the development of SbD principles and controls to align organizational design practices with risk appetite and security frameworks.<br> Chairs security architecture governance forums to review high-risk designs and approve necessary exceptions or enhancements.<br> Evaluates new service proposals and existing systems to identify architectural weaknesses and support cost-effective risk treatment decisions.<br> Establishes a continuous remediation program for existing services to identify and prioritize the closure of security design gaps.<br> Collaborates with engineering and DevOps teams throughout the SDLC to integrate security patterns and ensure remediation plans are actionable.<br> Defines and evolves secure design standards and reference architectures to maintain alignment with ISO 27001, NIST, and PCI DSS requirements.<br> Communicates security expectations and residual risk exposures to technical and non-technical stakeholders to drive informed business decisions.<br> Produces comprehensive reporting on design-related vulnerability trends to provide leadership with visibility into the security design posture.<br> Mentors architecture and engineering teams on secure design best practices to promote security adoption within Agile and DevOps environments.</p> <h4>Skills description</h4> <p><strong>Interpersonal skills</strong></p> <ul> <li>Demonstrated leadership in steering cross-functional teams and influencing without direct authority.</li> <li>Effective coach and mentor for teams in adopting secure-by-design principles.</li> <li>Strong risk analysis, problem-solving and decision-making skills.</li> <li>Excellent communication skills to articulate complex security topics to varied audiences.</li> <li>Proven ability to build trust and collaborate with stakeholders across business and technology domains.</li> </ul> <p><strong>Technical skills</strong></p> <ul> <li>Deep understanding of security principles, secure architecture patterns, secure network design, threat modelling techniques, and system design.</li> <li>Knowledge of modern technology stacks including cloud platforms, APIs, microservices, identity and access management, and secure development practices.</li> <li>Experience managing security initiatives at scale, including tracking delivery, dependencies and risk mitigation outcomes.</li> <li>Capability to assess complex architectures and distil clear, actionable security recommendations.</li> <li>Ability to translate business strategy into a security design roadmap and priorities.</li> <li>Strong understanding of evolving threat landscapes and emerging technologies.</li> <li>Professional certifications such as CISSP, CCSP, SABSA, TOGAF, or relevant cloud security/architecture certifications.</li> </ul> <p><strong>Professional experience</strong></p> <ul> <li>10+ years of experience in cybersecurity or secure architecture roles, including significant experience with security design and remediation.</li> </ul> <p><strong>Management experience</strong></p> <ul> <li>5+ years</li> </ul> <p><strong>Educational background</strong></p> <ul> <li>Bachelor’s degree in Cyber Security, Computer Science, Information Technology or related field.</li> <li>Relevant certifications may include: <ul> <li>CISSP – Certified Information Systems Security Professional</li> <li>CISM – Certified Information Security Manager</li> <li>CRISC – Certified in Risk and Information Systems Control</li> <li>CISA – Certified Information Systems Auditor</li> <li>ISO 27001 Lead Implementer or Lead Auditor</li> </ul> </li> </ul></p><p></p>

<p><h4>Essential responsibilities and daily duties include:</h4> <p><strong>Assist maintenance and support personnel supporting the Follow On Technical Support (FOTS) contract under NAVSEA PMS 326.</strong><br> Support craft and ships sold to foreign navies with fleet support of ships undergoing diesel engine repairs, overhauls, and modernization conversions.<br> Perform ready-to-start and post-repair inspections and review of operational testing procedures.<br> Conduct assessments such as ship visits to assess the material condition of shipboard systems.<br> Access, analyze, and provide recommended resolutions on diesel engines based on US Navy diesel inspector program.<br> Perform diesel engine inspections and Formal Periodic Assessments (FPAs) in accordance with the JFMM Revision B (volume four (4), chapter four (4)), OPNAV Instruction 9220.3, and the U.S. Navy Diesel Engine Inspector Handbook S9233-CJ-HBK-010.<br> Blueprint an engine, test engines and components, and take critical measurements to assess and eventually plan an overhaul or replacement.<br> Supervise complex repairs to different diesel engines such as MTU, Caterpillar, Fairbanks Morse, Isotta Fraschini, Paxman, etc.<br> Train crew and maintenance personnel in diesel maintenance and operations (focusing on foreign crews).</p> <h4>Minimum requirements</h4> <ul> <li>6 years of technical experience with maintenance of Navy shipboard diesel engines, propulsion, and auxiliary systems.</li> <li>Knowledge of computer systems and integrated software application programs.</li> <li>Ability to work independently and in a team environment.</li> <li>Ability to communicate verbally and in writing. Must be proficient in English.</li> <li>Ability to travel CONUS and OCONUS. Must be willing to travel to the Middle East (Iraq, Egypt, Saudi Arabia, Turkey, Bahrain), and also to Indo-Pacific countries (Philippines, Taiwan, etc.).</li> <li>Ability to obtain a country clearance and base pass authorization. Note: US citizenship is required.</li> <li>Ability to possess an active passport at least two years after arrival in Egypt.</li> </ul> <h4>Preferred qualifications</h4> <ul> <li>13 or more years of technical experience with maintenance of shipboard diesels.</li> <li>Prior US Navy or USCG service as a qualified USN Diesel Engine Inspector (DEI) who held the NEC on active duty OR DEI course certified or civilian equivalent.</li> <li>Fincantieri Motori Diesel engine experience.</li> </ul></p><p></p>

Objective: (summary about the position)<br><br>Seeking a highly experienced Security Lead Engineer to lead the design, implementation, and continuous improvement of cybersecurity measures across our hybrid environment. This role requires overseeing infrastructure, application, and cloud security; managing threat detection and response systems; guiding the security posture of internally developed software; and ensuring regulatory compliance through GRC frameworks. The ideal candidate brings technical depth, leadership capabilities, and a proactive mindset to protect our digital assets and business operations.<br><br>Responsibilities:<br><br> Security Architecture & Strategy Design, integrate, and maintain end-to-end security architecture for on-premises and cloud environments Ensure secure network topology including segmentation, access control, and VPN tunnels Lead development and enforcement of security policies, procedures, and best practices Work closely with developers and IT architects to embed security into application and infrastructure design SOC, SIEM, and Threat Management Oversee the operation and tuning of Security Operations Center (SOC) including SIEM platforms Manage endpoint protection through EDR and threat-hunting solutions Manage and enhance email security systems to protect against phishing, malware, and spam, ensuring compliance with organizational security policies Lead incident response efforts and develop threat prevention strategies Application and Cloud Security Supervise vulnerability scanning and penetration testing for internally developed applications Lead WAF deployment and optimization to protect business-critical web applications Implement security best practices and policy enforcement across multi-cloud environments Governance, Risk & Compliance (GRC) Drive cybersecurity-related compliance programs (e.g., SOC 2 Type 2, ISO 27001) Lead cross-functional GRC initiatives and support internal/external audits Manage security risk assessments and recommend mitigation strategies Documentation & Collaboration Maintain detailed documentation for security controls, policies, systems, and incidents Plan and conduct quarterly security awareness sessions to educate staff on emerging cyber threats, security best practices, and the organization's security policies Work collaboratively with software engineers, network teams, Dev Ops, and business units<br><br>Requirements<br><br>Min requirements:<br><br> Education: Bachelor's degree in engineering, Computer Science, Information Security or a related field Experience: 7 years in cybersecurity and information security roles 5+ years of hands-on experience in security architecture and threat management Qualifications necessary for the vacancy Proven expertise in: Security architecture for hybrid cloud/on-prem setups Firewalls, WAF, EDR, SIEM, UTM, IPS, Proxy, and DDoS mitigation Network security protocols, subnetting, VPNs, and access control models Set of skills necessary for the vacancy Problem-Solving and Analytical Skills: Ability to diagnose and resolve complex technical issues efficiently Skilled in designing and implementing scalable and secure IT solutions Organizational Skills: Strong ability to manage multiple projects and prioritize tasks effectively Commitment to meeting deadlines and maintaining high-quality standards Communication and Teamwork: Excellent written and verbal communication skills Ability to collaborate effectively with team members and stakeholders Certifications (Desirable): CISSP, CISM, CEH, OSCP, CCSP Cloud security certifications (e.g., AWS Security Specialty, Microsoft SC-100/SC-200) IT governance certifications (e.g., ISO 27001 LA, CISA)

<h2>Job Summary:</h2><p>We are seeking a highly motivated and results-driven <strong>Security Engineer</strong> to join our growing team. The ideal candidate shall act as a hybrid professional combining strong <strong>cybersecurity</strong> expertise, <strong>data encryption</strong> and protection knowledge, and hands-on field implementation capabilities. The role will involve driving the secure deployment, integration, and protection of IT infrastructure and security solutions across MIS’s enterprise clients, including experience with <strong>Thales security solutions</strong> and enterprise-grade security platforms.</p><h2>Key Responsibilities:</h2><ul><li><p>Design, deploy, and manage <strong>network and cybersecurity</strong> solutions.</p></li><li><p>Identify and define system security requirements.</p></li><li><p>Develop and implement cybersecurity architectures and designs.</p></li><li><p>Configure, monitor, and troubleshoot data security infrastructure.</p></li><li><p>Implement <strong>data encryption</strong> solutions to protect data</p></li><li><p>Prepare and maintain security documentation and standard procedures.</p></li><li><p>Develop tools and automation to reduce vulnerabilities and improve efficiency.</p></li><li><p>Respond to and manage security incidents to ensure rapid detection and resolution.</p></li><li><p>Collaborate with teams to support security and protection solutions.</p></li></ul><p></p>

We are seeking an Info Sec Intern to join and support our Security Operations Center (SOC) team.

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p><br></p><p><b>Role Purpose</b></p><p>The Senior Security Engineer is responsible for leading the design, implementation, integration, optimization, and support of cybersecurity solutions and services across enterprise customer environments. The role provides advanced technical expertise across multiple cybersecurity domains including Security Operations, Network Security, Endpoint Security, Identity &amp; Access Management (IAM), Cloud Security, Vulnerability Management, Data Protection, Security Monitoring, and Incident Response. The Senior Cyber Security Engineer acts as a technical leader within security projects, providing architecture guidance, mentoring junior engineers and consultants, supporting customer engagements, and ensuring cybersecurity solutions are delivered according to industry best practices, regulatory requirements, and organizational standards.</p><p>Job Profile</p><ul><li>Lead the delivery and implementation of end-to-end cybersecurity projects in enterprise-scale environments</li><li>Design, develop, and maintain secure architecture frameworks covering network, endpoint, identity, and cloud security</li><li>Manage and enhance Security Operations (SecOps) including monitoring, detection, and response capabilities</li><li>Oversee threat management, vulnerability management, and incident response processes to minimize risk exposure</li><li>Analyze and troubleshoot complex security and infrastructure issues across integrated environments</li><li>Collaborate with internal teams, vendors, and stakeholders to ensure seamless security integration and project execution</li><li>Provide technical leadership, mentoring, and guidance to security teams</li><li>Drive adherence to industry standards, policies, and compliance frameworks (ISO 27001, NIST, PCI-DSS)</li><li>Support continuous improvement initiatives by evaluating emerging threats, tools, and technologies</li><li>Bridge communication between technical and non-technical stakeholders to support decision-making</li></ul><p>Competencies and Qualification</p><p>Experience &amp; Education</p><ul><li>5 9 years in cybersecurity engineering or implementation roles</li><li>Bachelor s degree in Computer Science, Engineering, IT, or related field</li></ul><p>Skills</p><ul><li>Strong communication, presentation, and stakeholder management skills</li><li>Proven leadership, teamwork, and collaboration abilities</li><li>Fluency in Arabic and English</li></ul><p>Technical Expertise</p><ul><li>Security architecture, operations, and enterprise-scale environments</li><li>Threat management, vulnerability management, and incident response</li><li>Hands-on experience with SIEM, endpoint protection, IAM, and firewalls</li><li>Experience with vendors like Microsoft, Cisco, Palo Alto, Fortinet, Trend Micro</li></ul><p>Certifications</p><ul><li>CISSP, CISM, CEH, CompTIA Security+</li><li>Microsoft Security, Palo Alto PCNSE, Fortinet NSE, Splunk, CrowdStrike, CyberArk</li><li>ITIL Foundation</li></ul><p>Frameworks &amp; Tools</p><ul><li>ISO 27001, NIST, PCI-DSS</li><li>IT service management (ITIL) and quality assurance practices</li></ul><p>Security Technologies</p><ul><li>SIEM: Sentinel, Splunk, QRadar, Elastic</li><li>Endpoint: Defender, CrowdStrike, Trend Micro</li><li>Identity: Entra ID, CyberArk</li><li>Network: Cisco, Fortinet, Palo Alto, F5, Juniper</li></ul></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"></p><ul><li>5 9 years in cybersecurity engineering or implementation roles</li><li>Bachelor s degree in Computer Science, Engineering, IT, or related field</li><li>Strong communication, presentation, and stakeholder management skills</li><li>Proven leadership, teamwork, and collaboration abilities</li><li>Fluency in Arabic and English</li><li>Security architecture, operations, and enterprise-scale environments</li><li>Threat management, vulnerability management, and incident response</li><li>Hands-on experience with SIEM, endpoint protection, IAM, and firewalls</li><li>Experience with vendors like Microsoft, Cisco, Palo Alto, Fortinet, Trend Micro</li><li>Certifications: CISSP, CISM, CEH, CompTIA Security+, Microsoft Security, Palo Alto PCNSE, Fortinet NSE, Splunk, CrowdStrike, CyberArk, ITIL Foundation</li><li>Frameworks &amp; Tools: ISO 27001, NIST, PCI-DSS, ITIL</li><li>Security Technologies: SIEM (Sentinel, Splunk, QRadar, Elastic), Endpoint (Defender, CrowdStrike, Trend Micro), Identity (Entra ID, CyberArk), Network (Cisco, Fortinet, Palo Alto, F5, Juniper)</li></ul><p></p></section>

We’re Hiring | مطلوب للتعيين<br>Tech Security Lead – E-Commerce<br>???? Location | مكان العمل: Port Said, Egypt – بورسعيد<br>Experience | الخبرة: Minimum 10 years – خبرة لا تقل عن 10 سنوات<br>???? To Apply | للتقديم:Please send your CV to: careers@dominick.com.eg <br>Subject: Tech Security Lead – E-Commerce#Hiring #Job Opportunity #Tech Security #Cyber Security #ECommerce #Port Said #بورسعيد #وظائف #توظيف

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <p><strong>Join the Network Security Experts at Click ITS!</strong></p><br><br><p><strong>Click ITS</strong>, a leading System Integrator located in Egypt, is expanding our elite <strong>Network Security Department</strong>. We partner with industry giants including <strong>Fortinet, Palo Alto Networks, Kaspersky, CrowdStrike, Nozomi Networks, Tenable, and Thales</strong> to deliver comprehensive security solutions across various layers such as NGFW, SD-WAN, EDR, XDR, OT Security, Data Protection, MFA, and SOC.</p><br><br><p>We are currently looking for passionate and driven professionals to join our dynamic team in the following roles:</p><br><br><p><strong>1. Junior Network Security Engineer</strong></p><br><br><p>Are you ready to accelerate your career in cybersecurity? We are looking for a hands-on Junior Network Security Engineer with a strong foundation in network defence and a drive to learn.</p><br><br><p><strong>Experience Required:</strong> 3 Years</p><br><br><p><strong>Key Responsibilities:</strong></p><br><br><ul><li>Implement, configure, and manage security solutions across different layers (NGFW, SD-WAN, EDR/XDR).</li><li>Assist in the deployment and integration of top-tier vendor solutions including Fortinet, Palo Alto, and Kaspersky.</li><li>Monitor network traffic for security events and assist the SOC team in incident response.</li><li>Troubleshoot and resolve network security issues in enterprise environments.</li><li>Maintain and update security documentation and standard operating procedures.</li></ul><p><strong>Qualifications:</strong></p><br><br><ul><li>Bachelor's degree in computer engineering, Information Technology, or a related field.</li><li>Approximately 3 years of practical experience in network security or systems integration.</li><li>Familiarity with NGFW, Endpoint Security, and basic Data Protection concepts.</li><li>Relevant vendor certifications (e.g., NSE 4, PCNSA) are a strong plus.</li><li>Excellent problem-solving skills and a proactive attitude.</li></ul><p><strong>Why Join Click ITS?</strong></p><br><br><p><strong>Work with the Best: Hands-on experience with cutting-edge technologies from top global vendors.</strong></p><br><br><p><strong>Career Growth: Continuous learning opportunities, training, and certification support.</strong></p><br><br><p><strong>Impactful Work: Protect critical infrastructures and enterprise networks against modern threats.</strong></p><br><br><p><strong>Dynamic Culture: Join a collaborative, innovative, and fast-paced team environment in Egypt.</strong></p><br><br> <br><br> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> Mission <br><p><b>JOB PURPOSE:&nbsp;</b></p><br><br><p>The Jr Cybersecurity GRC Engineer supports the Governance, Risk, and Compliance (GRC) function by assisting in the implementation and maintenance of essential security policies and compliance activities. This role bridges the gap between technical operations and regulatory standards, ensuring the organization’s cybersecurity posture remains robust under the guidance of the GRC team.</p><br><br> Profile <br><p><b>RESPONSIBILITIES/DUTIES&nbsp;</b></p><br><br><p><b>Governance, Policy &amp; Compliance</b></p><br><br><p>•Support the development, review, and periodic maintenance of information security policies, standards, and internal procedures.</p><br><br><p>•Facilitate the communication of security policies across departments to ensure workforce alignment and organizational adherence.</p><br><br><p>•Assist in the collection, organization, and preservation of compliance evidence required for both internal and external audits.</p><br><br><p>•Contribute to the tracking of audit findings, helping to coordinate the timely remediation of identified gaps.</p><br><br><p><b>Risk Management &amp; Assessment</b></p><br><br><p>•Participate in the identification, assessment, and formal documentation of information security risks throughout the infrastructure.</p><br><br><p>•Maintain updated risk registers, ensuring all mitigation plans are documented and tracked for stakeholder review.</p><br><br><p>•Monitor the execution of risk treatment actions, providing regular status updates to the GRC Engineer.</p><br><br><p>•Conduct due diligence support for third-party and vendor risk assessments to ensure alignment with security requirements.</p><br><br><p><b>Control Monitoring &amp; Reporting</b></p><br><br><p>•Evaluate the operational effectiveness of security controls to identify potential vulnerabilities or performance gaps.</p><br><br><p>•Prepare periodic reports, dashboards, and executive summaries regarding GRC activities and compliance status.</p><br><br><p>•Document GRC workflows meticulously to ensure high-quality, audit-ready records for all security activities.</p><br><br><p>•Recommend incremental improvements to existing GRC processes, tools, and methodologies to enhance operational efficiency.</p><br><br><p><b>Security Operations Governance &amp; Compliance Support</b></p><br><br><p>•Support alignment of Security operations with security policies, standards, and regulatory requirements.</p><br><br><p>•Assist in maintaining Security procedures and playbooks (e.g., logging, detection, incident response).</p><br><br><p>•Support review of detection use cases and monitoring coverage from a compliance perspective.</p><br><br><p>•Assist in ensuring logging and monitoring controls meet audit requirements.</p><br><br><p><b>Safety Responsibilities:</b></p><br><br><p>•Promote a positive safety culture within the workplace and attend any safety-related meetings or briefings as required within the job role.</p><br><br><p>•Comply with the requirements of RDMC RQHSE Policy and Safety Management System.</p><br><br><p>•Be mindful that Safety, Security, and Environmental protection are everyone’s responsibility. All staff members are accountable for reporting and intervening in any Safety, Security, or Environmental violations.</p><br><br><p><b>ESSENTIAL QUALIFICATIONS, KNOWLEDGE &amp; EXPERIENCE</b></p><br><br><p><b>QUALIFICATIONS:&nbsp;</b></p><br><br><p>•Bachelor’s degree in Information Security, Computer Science, IT, or a related field.</p><br><br><p>•CompTIA Security+, ISC2 Certified in Cybersecurity, ISO 27001 Foundation, or OCEG (GRCP/GRCA) is an advantage.</p><br><br><p><b>KNOWLEDGE:&nbsp;</b></p><br><br><p>•Foundational understanding of cybersecurity standards (e.g., ISO 27001, NIST, IEC 62443, GDPR).</p><br><br><p>•Knowledge of risk management concepts and the information security lifecycle.</p><br><br><p>•Familiarity with IT infrastructure, network security concepts, and common enterprise audit processes.</p><br><br><p>•Advanced proficiency in Microsoft Office 365 (Excel, PowerPoint, Word) and basic experience with GRC/Audit management software.</p><br><br><p><b>EXPERIENCE:&nbsp;</b></p><br><br><p>•0-3 years of progressive experience in IT, Information Security, or cybersecurity-related roles.</p><br><br><p><b>DESIRED BEHAVIORS &amp; EXPERIENCES</b></p><br><br><p>•Possesses a strong aptitude for digging into granular data to identify the underlying causes of security indicators.</p><br><br><p>•Maintains a high level of precision in documentation, ensuring that no regulatory or policy detail is overlooked.</p><br><br><p>•Exhibits a proactive interest in emerging cybersecurity threats and modern regulatory landscapes (e.g., AI-driven security).</p><br><br><p>•Capable of bridging technical and non-technical departments to foster a security-conscious workplace culture.</p><br><br><p>•Security-first mindset with a high sense of integrity, responsibility, and ethical conduct.</p><br><br><p>•Resilient and organized while handling workload pressure, capable of balancing multiple tasks while meeting deadlines.</p><br><br><br> </div>

Job Purpose:<br>This role serves as the process owner of all assurance activities related to the availability, integrity, and confidentiality of customer, business partner, employee, and business information in compliance with the organisation's information security policies. A key element of the role is working with management to determine acceptable levels of risk for the organisation. This position is responsible for establishing and maintaining a corporate-wide information security management program to ensure that information assets are adequately protected. The role will also be responsible for the implementation of different security solutions to ensure compliance with the different applicable security and risk standards in the Kingdom of Saudi Arabia and other geographies that we will operate in.<br>Key Accountabilities:<br>Develop, implement, and monitor a strategic, comprehensive enterprise information securityand IT risk management program Full abreast with the SAMA IT risk framework and ensure all implementation is in full compliance with the framework, regulations, and guidelines Work directly with the business units to facilitate risk assessment and risk management processes Develop and enhance an information security management framework Understand and interact with related disciplines through committees to ensure the consistentapplication of policies and standards across all technology projects, systems, and services Provide leadership to the enterprise&#39;s information security organization Advise the leadership team on the appropriate administration of information security standards,assisting them in developing plans within their business units to manage these risks effectivelyby understanding the fundamental aspects of their business objectives. Partner with business stakeholders across the company to raise awareness of riskmanagement concerns Assist with the overall business technology planning, providing current knowledge and futurevision of technology and systems Manage institution-wide information security governance processes, chair the Information Security Advisory Committee and lead Information Security Liaisons in the establishment of aninformation security program and project priorities. Perform risk assessments that address security threats, changes to systems and/orapplications, process improvement initiatives, supplier assessments (including downstreamoutsourcers) and other requests from the business. Develop and implement a comprehensive cloud strategy, selecting between public, private, or hybrid cloud models Oversee the allocation of compute, storage, and networking resources using Infrastructure as Code (IaC) to ensure consistency and prevent & configuration drift". Monitor cloud usage and spending to identify underutilized resources, right-sizing instances toensure the cloud investment remains cost-effective. Establish real-time monitoring and alerting systems to proactively detect and resolveperformance bottlenecks or system failures. Implement robust security protocols, including Identity and Access Management (IAM), dataencryption, and regular audits to maintain compliance with industry standards Establish annual and long-range security and compliance goals, define security strategies,metrics, reporting mechanisms and program services; and create maturity models and aroadmap for continual program improvements. Mature and operationalise various GRC capability areas such as enterprise security riskmanagement, compliance management, policy management, 3rd party risk management, andmetrics and reporting. Drive remediation activities from identification, remediation plan, and closure. Hold ownersaccountable for delivery of remediation solutions within the agreed upon/reasonable SLA. Manage BCP/DRP and Incident Response procedures, tests, and audits. Interface with internal and external auditors to articulate security controls when appropriate. Assess and communicate all security risks associated with purchases or practices performedby the company. Work with internal stakeholders across the business to identify, assess, report, track, andremediate risks and support the development of risk mitigation strategies. Make risk-based decisions and trade-offs impacting annual investment strategies and projectprioritisation. Maintain a strong understanding of risk management methodologies and frameworks. Understand business processes, regulations, and controls and develop meaningful tests toensure controls are operating effectively. Perform operational deep dives on compliance-related processes and systems. Identify, gather, track, and report key risk indicators. Work with partners to identify the root cause of issues. Identify potential risks and develop protocols that staff must follow to reduce or manage those risks. Implementing and overseeing the organisation’s cybersecurity program Aligning cybersecurity and business objectives Maintain PCI compliance of the organisation. Working closely with the cybersecurity team Monitoring Incident Response Activities Managing business continuity and disaster recovery Managing the governance and setup of Cloud Infrastructure Promoting a culture of strong information security Managing vendor relationships Utilising cybersecurity budgets effectively Providing awareness and training<br>Job Requirements:<br>Professional security management certification is mandatory (CISSP/CCSP/CISM/CISA) Degree in business administration or a technology-related (computer science or Computer Engineering) field required. 7+ years of experience in Information/Cybersecurity or IT Risk Management Strong knowledge of Cloud computing/Elastic computing across virtualised environments Minimum of 7 years of experience in a combination of risk management, information security and IT jobs Knowledge of common information security management frameworks, such as ISO/IEC 27001 and NIST. Excellent written and verbal communication skills and high level of personal integrity Innovative thinking and leadership with an ability to lead and motivate cross- functional, interdisciplinary teams Experience with contract and vendor negotiations and management, including managed services. Specific experience in Agile (scaled) software development or other best-in-class development practices.

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <p>Overview We Are PepsiCo PepsiCo is a leading name in North Africa’s food and beverage industry, where our products are enjoyed by consumers daily across the region. We offer a robust portfolio of beloved brands like PEPSI, SEVEN-UP, DORITOS, CHEETOS and CHIPSY, designed to cater to the tastes and preferences of consumers. With a focus on local sourcing, production, and distribution, PepsiCo provides essential support to local economies and partners closely with communities throughout the region. Guiding Vision and Regional Impact PepsiCo’s vision aligns with our global goal to be the Leader in Beverages and Convenient Foods by Winning with PepsiCo Positive (pep+). This strategic transformation is committed to sustainable growth by putting people and the planet at the heart of our operations. In North Africa, this includes initiatives in responsible sourcing, waste reduction, and water conservation. Our regional programs empower local talent, boost employment, and provide support for local agriculture, particularly through partnerships with farmers and suppliers. Empowering Our People and Communities Our dynamic teams drive the PepsiCo culture in North Africa, embracing diversity and collaboration to solve local challenges and create innovative products. We are dedicated to fostering an inclusive workplace, one where every individual feels valued and empowered to be themselves. This commitment extends beyond our employees to positively impact the communities we serve, striving for shared growth and a healthier, more sustainable future for all. Diversity and Inclusion Commitment PepsiCo stands firmly behind our global commitment to diversity, equality, and human rights. We are proud to be an equal opportunity employer, ensuring a fair and welcoming workplace for all, regardless of age, gender, religion, disability, or any other characteristic. Our dedication to inclusion strengthens our workforce and helps drive our business forward, enriching both PepsiCo and the communities in North Africa. Responsibilities Area Security Manager Execute operational implementation of strategic planning as directed by the Regional Security Director –(MENA). Physically located in AOR ( Area of responsibility), the role would serve as a Business Unit asset in responding to all emerging security risks and incidents throughout the area of responsibility (Role will be responsible for theprotection of our people and Assets in AOR ( Area of responsibility) Responsibilities. The principal accountability of the Area Security Manager is driving the implementation and execution of security, crisis management, business continuity management strategies, plans and protocols, and best practices across the AOR ( Area of responsibility) businesses. The highlights of these accountabilities include,but are not limited to: In line with the broader security strategy and objectives, implement a security Plan to identify, assess, and mitigate risks to PepsiCo’s associates, facilities, proprietary information, and brand/reputation. Oversee and facilitate the ongoing strengthening of a sustainable, AOR ( Area of responsibility) Crisis Management and Business Continuity Planning and capability in the Area of Responsibility. Through training and audit validate that the AOR ( Area of responsibility) Crisis Management and Business Continuity plans are current and functional. Revise and maintain all security main domains (Physical – Technical – Procedural – Investigational – Executive Protection) within AOR ( Area of responsibility). Maintain strong working relationships with locations leads, and provide consultation to them. Ensure that our engagement with other functions is an added value. Excellent organizational skills to be able to prioritize responsibilities meet deadlines and work in a multi-task environment. Plan and oversee periodic security self-assessments and bi-annual security risk assessments for premises in the area of responsibility in order to identify critical vulnerabilities and assist in closing these risks through cost effective, bestpractice security enhancements. Maintain contacts with security partners at foreign embassies, other multi-national companies, government security agencies, and professional security organizations to benchmark and promote security best practices. In close consultation with the Security Director (MENA), analyze security risks inherent in undertaking new business ventures and offer expertise-based risk mitigation measures. Within AOR ( Area of responsibility) , develop and maintain working relationships with national and local security, emergency response, law enforcement, and regulatory authorities as well as with security managers of other large multinational companies. Ensure compliance with PepsiCo AMESA Security Risk Management System and supporting standards and procedures. Develop and deliver quarterly security awareness and training programs. Advise and assist before, during, and after security incidents, including on-the-spot risk assessments and security advice to business travelers. Implement a consultation plan to strengthen relationships with external 3rd parties. Conduct and coordinate investigations to include counterfeit, extortion, contamination of our products, loss reduction, kidnapping, robberies, Speak Up, fraud, corruption, and security threats against the AOR interests and associates. During strike operations or labor disputes provide training to security guards and employees in strike protocols. Oversee security guard companies to leverage economies of scale and lower costs. Implement and manage an effective KPI management system in accordance with Regional Security, and evaluate the service provided by the 3P Security providers on a monthly basis. Qualifications Ensure the continued professional development of the AOR ( Area of responsibility) security team, including the identification of suitable individuals in longer-term succession planning Qualifications. Ability to work in a dynamic and rapidly expanding business environment A minimum of 10 years of working experience in law enforcement or military mid-management; 3 years ofcorporate security experience in the private sector (preferably industrial sectors) with accountabilities and keymeasures listed above Comprehensive substantive knowledge of best security practices, principles, and objectives Advanced, proven experience in security management Bachelor’s degree (minimum) A working proficiency in written and spoken English. Ability to work among a team of peers. Ability to travel in the country and handle multiple locations. Ability to work in a challenging environment and to be connected 24/7. Excellent organizational skills to be able to prioritize responsibilities meet deadlines and work in a multi-task environment Ability to work on any other Task or Duties that could be assigned or delegated.</p> </div>

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p>Join Us</p><p>At Vodafone, we re not just shaping the future of connectivity for our customers we re shaping the future for everyone who joins our team. When you work with us, you re part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact. Role Purpose</p><p>About the Role We are looking for a Cyber Security Assurance Senior Specialist to join our team and play a key role in ensuring the security of Vodafone s digital environment. This role is responsible for conducting penetration testing, vulnerability analysis, and security assurance activities across web applications, mobile platforms, networks, and cloud environments. As a Cyber Security Assurance Senior Specialist, you will work closely with technical teams and business stakeholders to identify, assess, and mitigate security risks while ensuring compliance with Vodafone s cyber security policies and standards.</p><p>Job Responsibilities</p><ul><li>Conduct penetration testing on web applications, networks, mobile applications, and cloud environments to identify vulnerabilities and security weaknesses.</li><li>Perform vulnerability analysis and provide remediation recommendations to enhance security posture.</li><li>Ensure secure acceptance of new nodes and technologies by validating compliance with Vodafone s security policies and industry standards.</li><li>Perform regular security assurance activities on existing systems and applications to maintain continuous compliance and protection against emerging threats.</li><li>Participate in risk assessments for new projects, providing a security assurance perspective to ensure risks are identified and mitigated early in the development cycle.</li><li>Collaborate with Vodafone technical teams and business units to address and remediate penetration testing findings effectively.</li><li>Stay up to date with emerging security threats, vulnerabilities, and industry best practices, applying them to improve security assurance processes.</li></ul><p>Not a perfect fit?</p><p>Worried that you don t meet all the desired criteria exactly? At Vodafone we are passionate about empowering people and creating a workplace where everyone can thrive, whatever their personal or professional background. If you re excited about this role but your experience doesn t align exactly with every part of the job description, we encourage you to still apply as you may be the right candidate for this role or another opportunity.</p><p>Core competencies, knowledge, and experience</p><p>Key activities</p><ul><li>Follow internal delivery processes to deliver cyber security programs requirements in alignment with global/local policies.</li><li>Ensure delivery of projects on time and within allocated budget.</li><li>Ensure that all streams running on the right track and fulfilling their main objectives.</li><li>Issue reports for running streams to Cyber Security and Technology Management</li><li>Manages building proper interface with different vendors.</li><li>Ensure projects and activities delivery with vendors on time and within allocated budget</li></ul><p>Strong knowledge of security frameworks such as MITRE ATT&amp;CK , NIST and CIS.</p><p>Familiarity with hardening configurations for different environments (servers, databases, applications, etc.).</p><p>Experience in risk assessment and providing security recommendations in line with business requirements.</p><p>Ability to work collaboratively with cross-functional teams to address and mitigate security vulnerabilities.</p><p>Strong analytical and problem-solving skills, with the ability to communicate complex security issues to technical and non-technical stakeholders.</p><p>Relevant certifications are a plus ( OSCP, eWPTX, eCPPT, or similar ).</p></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"></p><ul><li>Conduct penetration testing on web applications, networks, mobile applications, and cloud environments to identify vulnerabilities and security weaknesses.</li><li>Perform vulnerability analysis and provide remediation recommendations to enhance security posture.</li><li>Ensure secure acceptance of new nodes and technologies by validating compliance with Vodafone s security policies and industry standards.</li><li>Perform regular security assurance activities on existing systems and applications to maintain continuous compliance and protection against emerging threats.</li><li>Participate in risk assessments for new projects, providing a security assurance perspective to ensure risks are identified and mitigated early in the development cycle.</li><li>Collaborate with Vodafone technical teams and business units to address and remediate penetration testing findings effectively.</li><li>Stay up to date with emerging security threats, vulnerabilities, and industry best practices, applying them to improve security assurance processes.</li><li>Follow internal delivery processes to deliver cyber security programs requirements in alignment with global/local policies.</li><li>Ensure delivery of projects on time and within allocated budget.</li><li>Ensure that all streams running on the right track and fulfilling their main objectives.</li><li>Issue reports for running streams to Cyber Security and Technology Management</li><li>Manages building proper interface with different vendors.</li><li>Ensure projects and activities delivery with vendors on time and within allocated budget</li><li>Strong knowledge of security frameworks such as MITRE ATT&amp;CK , NIST and CIS.</li><li>Familiarity with hardening configurations for different environments (servers, databases, applications, etc.).</li><li>Experience in risk assessment and providing security recommendations in line with business requirements.</li><li>Ability to work collaboratively with cross-functional teams to address and mitigate security vulnerabilities.</li><li>Strong analytical and problem-solving skills, with the ability to communicate complex security issues to technical and non-technical stakeholders.</li><li>Relevant certifications are a plus ( OSCP, eWPTX, eCPPT, or similar ).</li></ul><p></p></section>